2.2.4. Proxying connections

Zorp is a proxy gateway. It separates the connection between the client and the server into two separate connections: one between the client and Zorp, and another between Zorp and the server. Zorp receives the incoming client connection requests, inspects them, and transfers them to the server. Zorp also receives the replies of the server, inspects them, and replies to the client instead of the server. That way Zorp has access to the entire network communication between the client and the server, and can enforce protocol standards and the security policy of the organization (for example, permit only specific clients to access the server, or enforce the use of strong encryption algorithms in the connection).

Proxying can take two basic forms:

  • Non-transparent: In case of non-transparent proxying, client connections target Zorp instead of their intended destination.This solution usually requires some client-side setup, for example, to configure the proxy settings in the web browser of the client.

  • Transparent: Zorp can operate transparently, to be integrated to the network easily. In case of transparent proxying, the client connections target the intended destinations server, and Zorp inspects the network traffic directly. The client and the server do not detect that Zorp mitigates their communication. In case of transparent proxying, no client side setup is required. Consequently, there is no need to modify the client and server configuration when Zorp is integrated into the network: Zorp is invisible for the end user.